News for hackers. Stuff that matters.

sepent

Wow, they really got me with that April Fools' prank! Sorry for the mix-up, folks.

Ask HN: Is it moral to indirectly aid a corrupt government?

Recently the article "How the Iranian Government Shut Off the Internet"[1] on HN was almost popular. It talked about the complexity of the Iran's decentralized infrastructures with technical implants to give officials more influence. What this report totally overlooked was the people who designed and implemented this complex system.Yesterday, I watched an interview[2] with a former Iran's...

( Read More... | 3 comments | 2 points | on HN )
Re:Internet in Iran gradually shuttting down due to protests on Saturday November 16, 2019 @04:29PM (#21555081)
I live in Iran and I am lucky enough to have a connected link right now, but this is the last link among the others I lost in the previous hours. I was wondering is there any stable solution like satellite internet or something without direct affiliation with government for people like me, desperate enough to ask questions like this.
This is from QBASIC help file. Composing from PC speaker was very fun:

PLAY "MBT180o2P2P8L8GGGL2E-P24P8L8FFFL2D"

Re:China is blocking all language editions of Wikipedia on Thursday May 16, 2019 @08:36AM (#19928341)
I used the same method to see what is the blocking mechanism in Iran. I tried to connect to www.bbc.com which is blocked in Iran.

The DNS injection is obviously in place. But something strange happened when I checked the SNI filtering. The curl command stopped at "TLSv1.2 (OUT), TLS alert, Client hello (1)" and never exited when I tried to connect to www.bbc.com but with a --connect-to that is not blocked. Nothing strange until now. If SNI blocking is in place, they probably drop all the remaining packets of the connection. The strange thing is that when I try the opposite test and I connect to www.kernel.org (not blocked in Iran, too!) but with www.bbc.com SNI it still stops at TLS client hello.

First I thought they blocked the IP address, but I was able to connect to 212.58.244.210 (the IP address of www.bbc.com) on port 443 with telnet command. So, is Iran's regime using some other blocking mechanism that I'm not aware of? Or am I doing some kind of mistake?

Re:Why does APT not use HTTPS? on Tuesday January 22, 2019 @02:24AM (#18966610)
"HTTPS does not provide meaningful privacy for obtaining packages. As an eavesdropper can usually see which hosts you are contacting, if you connect to your distribution's mirror network it would be fairly obvious that you are downloading updates."

It is a dangerous mistake to decide what kind of privacy people need. Privacy should be absolute and without conditions.

What if you live in Iran? Some Ubuntu packages are already inaccessible due to government's pornography keywords censorship. E.g. I can't download "libjs-hooker" from this http link http://archive.ubuntu.com/ubuntu/pool/universe/n/node-hooker... from Iran. What if the government decides to censor the "tor" package?

Re:Ask HN: Best things in your bash_profile/aliases? on Tuesday January 15, 2019 @02:30AM (#18909399)
I never use vim or emacs viper-mode on my machine. But I let other people to use my emacs viper-mode:

  vi()
  {
      emacs -nw --eval '(and (switch-to-buffer "foobar") (setq viper-mode t) (setq viper-inhibit-startup-message t) (setq viper-expert-level 1) (viper-mode))' "$@"
  }

  alias vim=vi
  alias vim.tiny=vi
  alias vim.basic=vi
Re:Emacs Fireplace on Wednesday December 26, 2018 @04:43AM (#18761429)
Can I add this as a zone program in zone-mode?
I just finished reading this book yesterday. I am not an expert in refactoring but the book seems too old, although most advises could be still useful. Anyway, today I found a new book by the author: Brutal Refactoring: More Working Effectively with Legacy Code. Unfortunately, I couldn't find a good review of the book on the Internet. But I think it could be more useful.

Https Google Search Redirecting to http in Iran

How can a monkey in the middle stop you from going to encrypted Google search? How can they redirect you instead to plain old http://www.google.com?So I'm doing a normal Google search like I do a hundred times everyday, and suddenly I get this message from Google:"SSL search is offThis network has turned off SSL search, so you cannot see personalized results.The security features of SSL search...

( Read More... | 1 comment | 3 points | on HN )
Re:Iran Shuts Down Major Websites and Https Protocol on Friday February 10, 2012 @11:48AM (#3576451)
To install it under ubuntu:

sudo add-apt-repository ppa:mohammad-sepent/ppa

sudo apt-get update

sudo apt-get install issh

For other distros you can grab the .deb or the source package from the given link.

Re:Iran Shuts Down Major Websites and Https Protocol on Friday February 10, 2012 @09:04AM (#3575801)
Moreover, SSH has stopped working, too. But, finally I found a way to circumvent it. A simple twist in the client side, could simply bypass the filtering.

I wrote a simple script to do this, and I would like to share it with all of my countrymen:

https://launchpad.net/~mohammad-sepent/+archive/ppa/+package...

To use it, just replace ssh command with issh like this:

issh user@hostname [other-ssh-options]

Re:Windows 8 Store will allow open source apps on Monday December 12, 2011 @01:18PM (#3344340)
Is this right?

"Microsoft welcomes OSI open source to Win8 store, GPL blocked at the door"

link: http://www.theregister.co.uk/2011/12/08/open_source_windows_...

Re:Google now tells you your IP when you ask it in search on Wednesday October 19, 2011 @05:03AM (#3129318)
Re:Plink, a multiplayer HTML5 music game on Sunday October 09, 2011 @09:10AM (#3090391)
Doesn't work in Chromium 13, but works in Chromium 14.
Re:Plink, a multiplayer HTML5 music game on Sunday October 09, 2011 @05:48AM (#3090126)
I used a proxy server in US and it works now.
Re:Plink, a multiplayer HTML5 music game on Sunday October 09, 2011 @05:27AM (#3090104)
I have the same problem...
Re:JsLinux: This time with an EXT2 local storage Block Device on Sunday October 09, 2011 @05:13AM (#3090077)
Cool, but what is the username/password?

Welkom bij JS/Linux

JS/Linux login:

Re:What tool would *you* use to solve this? on Wednesday October 05, 2011 @08:51AM (#3075352)
Drawing several charts with LibreOffice Calc:

http://www.hostmypic.net/pictures/93969c88a3ecaac84ba81c8d38...

And it is almost obvious that we have two data sets: (A, D, E) and (B, C, F)

Re:Tilt-Shift Using CSS on Tuesday October 04, 2011 @10:56AM (#3071146)
Yes, and the red highlight when you select the text doesn't work in Firefox 7.
Re:Iran blocks Tor; Tor releases same-day fix on Friday September 16, 2011 @12:12PM (#3005037)
Isn't it secure if you use SSL (over tor)?

http://www.wired.com/threatlevel/2010/06/wikileaks-documents... says "The siphoned documents, supposedly stolen by Chinese hackers or spies who were using the Tor network to transmit the data,..."

What kind of sick spy uses TOR to send important documents in palin text?

Re:Gmail.com being MITM'd by Iran using this certificate on Tuesday August 30, 2011 @05:53AM (#2940753)
I did traceroute google.com/mail.google.com. nothing unusual happened:

[1-7 are ISP routers]

8. 78.38.255.89

9. 78.38.245.17

10. 213.248.76.5

11. 80.91.248.94

12. 80.91.253.118

13. 213.155.130.243

14. 213.248.83.94

15. 72.14.238.232

16. 209.85.251.88

17. 209.85.255.234

18. 209.85.255.231

19. 64.233.175.98

I used mtr and the route to google is changing every several seconds, but I thinks it's normal.

All I know is that internet blocking happens in LCT [78.38.255.] or KAMYARAN [78.38.245.].

Re:Gmail.com being MITM'd by Iran using this certificate on Tuesday August 30, 2011 @04:25AM (#2940578)
I can confirm it, too.

My brother works in a company that produces spying software for government. Days ago, he told me he himself has written several programs to spy on yahoo, hotmail and gmail but he thought they couldn't deploy the gmail program because of https. I guess, he should think again.

I am scared. My only hope was SSL and I can't trust that anymore?

Re:Test if any website is Blocked in Iran in real-time on Sunday August 14, 2011 @04:54AM (#2883175)
Most blogspot bogs are not blocked in Iran. All of them are blocked. And wordpress blogs, too. Facebook, youtube, twitter, BBC, CNN, tinyurl, goo.gl, megaupload and thepiratebay are a few more examples. Moreover, having a satellite dish is against the law, just look at the pictures in this Persian website: http://www.asriran.com/fa/news/176720/%D8%AC%D9%85%D8%B9-%D8... But, in my opinion, these aren't the main problem. The main problem is internet bandwidth limit for home users, i.e. 128 KBit/s. Yeah, that's right: 128 KBit/s. I have a server in the US and bypassing their filtering system is not a problem for most Iranians but how could you watch a video in youtube with a 128 Kbit/s connection?